VYPR

AX3000

by Archer

CVEs (1)

  • CVE-2026-118865HigNov 3, 2026
    risk 0.47cvss —epss —

    An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that…